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ABSTRACT 


Digital computer interrupts are becoming more important as these 
machines increase in the interaction with their environment. Different 
methods of interrupt implementation are described. They are then 
analyzed in the areas of response time, overhead, and Saturation. 
Examples of the use of interrupts in different computational environ- 
ments are given. Five modifications toa general purpose computer 
System are proposed. These modifications, each of which used interrupts, 
enable the system to be more easily used in a limited time~Sharing mode. 
The results of these modifications are compared to those of the software 


that would be required to accomplish the same objectives. 
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SECTION I 


INTRODUCTION 


Early digital computers were designed and used to solve individual 
problems involving extensive calculations and produce the answers. When 
the tremendous computational power of computers was applied to other 
uses, however, the mere sequential execution of programmed steps in a 
predetermined order was no longer sufficient. In such areas as on-line 
automatic control, real-time simulation, and time-sharing systems, the 
computer is required to be responsive to the demands of its environment. 
This requirement is usually fulfilled by the use of interrupts. 

Basically, an interrupt is a circuit designed to halt the normal 
execution of a computer program on signal, and to execute in its place 
a group of instructions to fulfill the needs of the device which initiated 
the signal. 

This paper will analyze the various methods of interrupt implementa- 
tion and usage, and propose a small-scale time-sharing system which is 
implemented on a general purpose digital computer through design changes 


Weadiizing priority ItereupEs. 


dks. 


SECTION IT 


ANALYSIS OF INTERRUPT SYSTEM REQUIREMENTS 


Interrupts can be divided into three categories according to purpose. 
The first of these, the request interrupt, is one which requires the 
computer to take some immediate action to satisfy the cause of the inter- 
rupt. Secondly, the indicator interrupt notifies the computer of some 
external condition which does not require action, but the computer may 
sample this condition to determine a course of action. The third type 
is the fault interrupt, which is caused by some internal abnormal condi- 


tion such as a parity error. 


I. DESIGN CHARACTERISTICS 


There are many methods for implementing interrupts in a digital 
computer. The following paragraphs will describe the most prevalent 
methods and classify them logically according to their characteristics. 
Methods of Implementation 

The basic requirement for an interrupt is to stop execution of the 
current instruction sequence, make some record of the stopping point, 
and execute instead some other special set of instructions, called the 
interrupt subroutine. The first method to implement this is the singte 
interrupt system. 

Single interrupt. The single interrupt system basically consists 
of one flip-flop in the computer's control circuitry which is wired@me 
Some external device. This flip-flop is set whenever the condition 
causing the interrupt is present. The CPU will normally check the state 
of this flip-flop after each instruction execution. If it is set, the 
CPU will store the contents of the program address counter and execute the 


next instruction (the first instruction in the interrupt subroutine) fram 
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some fixed location associated with this interrupt. Some provision would 
then be made to clear the flip-flop and return to the point of interrup- 
tion upon completion of the subroutine. The use of a system that does 
not mark the point of interruption is not feasible for the following rea- 
sons. Request and indicator interrupts normally require returning to the 
program in progress when the interrupt was received. Fault interrupts 
usually would not return, but the address of the instruction being execu- 
ted when the fault occurred is important in determining the cause of the 
raurt. 

The single interrupt scheme described above has another limitation 
in addition to being able to sense only one external condition. If, 
while the interrupt is being processed, a second interrupt signal is 
received, it will be lost, since it will attempt to set a flip-flop which 
is already set. If the flip-flop is cleared at the start of the interrupt 
subroutine rather than at the end to correct this, then another interrupt 
signal would start the subroutine over again, destroying the original 
interruption point. This would result in an infinite program loop. 

Single interrupt with interlock. The deficiency noted above can be 
eliminated by using a single interrupt with interlock, a device similar 
to the single interrupt except that it has a second, or interlock, flip- 
flop. An interrupt signal sets the first, or interrupt, flip-flop. At 
the end of the next instruction, the CPU initiates the interrupt only if 
the interlock flip-flop is cleared. Immediately after starting the 
interrupt subroutine, the CPU sets the interlock flip-flop and clears 
the interrupt flip-flop. Another interrupt signal may then be received 
and stored until completion of the present interrupt subroutine, when the 


interlock flip-flop is cleared. 
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MUlclptementerrupt wlttyinmterlock. The next logical step in inter- 
rupt system development is a system which will accept interrupt signals 
from more than one source and be able to determine which source originated 
the signal. Such a multiple interrupt system operates in a manner similar 
to the single interrupt, except that the interrupt signal, in addition to 
setting the interrupt flip-flop, atso sets some indicator in the computer 
which is unique to the signal source. Once the interrupt subroutine has 
been entered, it interrogates the source indicators to determine which 
external device initiated the signal. 

When this multiple source concept is applied to the single interrupt, 
new problems must be resolved. Since multiple interrupts are usually 
independent, the probability exists that an interrupt from one Source may 
still be in process when an interrupt from another source is received. 

The system should certainly prevent this second signal from being lost. 
AS a minimum requirement, therefore, an interlock should be used with a 
multiple interrupt system. 

The multiple interrupt with interlock can store a second interrupt 
Signal while processing the first one. This system must clear the source 
indicator immediately after interrogating it. Otherwise, when the second 
signal sets its indicator, an ambiguity would exist as to which source 
initiated the second interrupt. When this idea is extended to allow for 
more than one additional interrupt, the interrupt flip-flop then becomes 
an indication that at least one interrupt signal was received while pro- 
cessing the present interrupt. The CPU would interrogate and store all 
source indicators for orderly processing. The system would then be re- 
turned to the condition of being receptive to interrupts from all sources. 


If this interrupt scheme were used, the system would have to be designed 
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so that interrupts from one source occurring more often than they could be 
serviced would either be impossible or of no significance. 

Another implication of the interlock £lip-flop 1s that wot veeom 
interrupt 18 being processedeethe computemes Unintereupt tb 1c . salem 
always desirable for the single interrupt for reasons previously men- 
tioned. [It is possible, however, that in a multiple interrupt system, 
an interrupt signal is received which is more important than the one being 
processed. In such a situation lt may be desirabie to allow the money im- 
portant interrupt to gain control in deference to the less important one. 
A system with this feature is one form of a priority interrupt system. 

Priority interrupt. A priority, interrupt system is basteally defined 
as an interrupt system which, when twoor more interrupt signals are in- 
volved, is able to distinguish among them according to priority and pro- 
cess the one with higher priority. The first of two types of priority 
interrupt systems to be discussed is the single level priority interrupt 
system. This system has essentially the same features as the multiple 
interrupt with interlock, with the added condition that when the CPU finds 
the interrupt flip-flop set, it interrogates the source indicators one at 
atime, im order of priority, to determine the next interrvupt fo Despre 
cessed. It is single level because the CPU is uninterruptible while 
executing an interrupt subroutine. 

The second type is the multi-level priority interrupt system. This 
System is similar to the one previously described, with the exception 
that an interrupt subroutine may be interrupted by a higher priority 
interrupt signal. This system has the advantage that if an interrupt 
subroutine is being processed, it will always be the most important of 
the ones awaiting processing. 


In some situations where priority interrupts are used, a special 
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interrupt is necessary for processing computer faults. This special de- 
vice, known as a trap, is similar to an interrupt except that control is 
not returned to the interrupted program, which eliminates the problem of 
register and indicator storage. A trap usually does not require a position 
in the priority hierarchy, since the normal purpose of a trap routine is 

to make a post-mortem examination of the faulted program, a task of in- 
herently low priority. 

Selectivity. Another important characteristic of interrupt systems 
is selectivity. Selectivity is the ability of the computer to ignore or 
defer action on all or selected individual interrupts. Many ambiguous 
terms related to selectivity are used in the comptitter field. The termi- 
nology used here has been chosen as the most logically descriptive in 
each case. 

The first selectivity feature to be discussed ig recognize/ignore. 
The computer may, under program control, select either the recognize 
state or the ignore state for an interrupt. If the ignore state is 
selected, all incoming interrupt signals are essentially grounded. Recog- 
nize/ignore may be further classified as general or selective. The gen- 
eral recognize/ignore pertains to the entire interrupt system. The 
selective recognize/ignore has the ability to ignore only part of the 
System and recognize interrupts from the remainder. Selective recognize/ 
ignore is classed as either individual, for single interrupts, or group, 
where more than one is involved. If this feature is designed so that a 
general recognize following a general ignore will return the selective 
ignores to their original state, then the selective recognize/ignore is 
said to be exclusive. Conversely, an inclusive selective recognize/ignore 
would be one in which previously executed individual or group ignores are 


destroyed by a general ignore. 
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That feature which permits the computer to postpone incoming inter- 
rupt signals for later process is called allow/defer. When one or more 
interrupts are deferred (placed in the defer state), interrupt signals 
are stored in the source indicators. An interrupt signal is processed 
normally when that interrupt is allowed (returned to the allow state). 
The characteristics of selectivity for the recognize/ignore feature are 
equally applicable to allow/defer. 

Return of control. An important consideration in interrupt imple- 
mentation is the method of retaining the status of the interrupted program 
so that a smooth transition can be made back to it when the interrupt 
subroutine is completed. The minimum requirement, as stated previously, 
is to save the program address counter. It is desirable, however, to 
provide some hardware method of storing any internal computer indicators, 
such as overflow. When the computer is to return to a program after an 
interrupt subroutine, the previous contents of arithmetic and index 
registers must be available. The practice of saving and restoring regis- 
ters when writing normal subroutines is usually an adequate method for 
interrupt subroutines. Of course, only the registers used need to be 
saved and restored. 

Interruptibility. Program interruptibility is another important 
consideration in designing computers which use interrupts. The basic 
question is one of determining at what points in the execution of in- 
structions an interrupt will be allowed to occur. The simplest logical 
solution to this question is to allow the recognition of interrupts be- 
tween instructions. Any general scheme of allowing interrupts during the 
execution of an instruction can become exceedingly complex. An instruc- 


tion usually causes the control circuitry to take certain actions con- 
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currently and to use results obtained early in an instruction to determine 
some course of action later in that Same instruction. For this reason 
it would not be feasible to recommence in the middle of an instruction if 
that is where the interrupt occurred. The case in which an instruction 
uses registers for both computation and storing the answer upon completion 
is more critical. For example, if a divide instruction were interrupted 
when the divide operation were half completed, the contents of the accumu- 
lator would be meaningless. This type of instruction could not be repeated 
after interruption because at the beginning of the instruction the accumu- 
lator contains information to be used during execution. It is possible 
to reStart such an instruction at the point of interruption, but ae 
registers and indicators would have to be restored. This would be a com- 
plex and time-consuming operation for an arithmetic or shifting instruc- 
tion; the effort is probably not worthwhile. 

Some instructions take so long to execute, however, that to adopt 
the policy that all instructions will be allowed to proceed to completion 
before interruption is probably undesirable. Also, some computer opera- 
tions are accomplished by a contiguous chain of instructions which would 


be difficult to reconstitute if interrupted. 
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II. OPERATING CHARACTERISTICS 


The previous material represents an attempt to logically explore 
and categorize the possible methods of implementation and attributes of 
interrupt systems. New definitions have been provided where confuSion 
heretofore existed. The following paragraphs discuss three important 
factors concerning interrupts; response time, overhead, and saturation. 
A careful analysis of these factors from the standpoint of system re- 
quirements should preclude the choice of the appropriate interrupt system 
in every case. 

Response Time 

Response time is a term which is broadly defined as the time between 
receipt by the computer of an interrupt signal and some specific action 
taken by the computer in response to that action. Three other terms have 
been chosen which define more precisely the concept of response time. 
These are reaction time, recognition time, and decision time. 

Reaction time is defined to be the length of time between interrupt 
signal receipt and the start of execution of the first instruction re- 
lated to the interrupt. Reaction time, then, iS a meaSure of how fast 
the computer shifts from its current program to process the interrupt 
onee it is received. Recognition time is defined as the length of the 
time between the execution of the first instruction related to the inter- 
rupt and the determination by the computer of the source (and purpose) 
of the interrupt. Decision time is defined as the length of time between 
determination of interrupt source and completion of the action required 
by the interrupt. 

Reaction time. Required reaction time is a primary consideration 


in determining the degree of interruptibility and the method of implemen- 
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tation. ff reaction time of an interrupt is considered in the absence of 
all other possible interrupts, then it is determined only by interrupti- 
Ditityeemence thempossibility of other interrupts is introdueed into the 
problem, the mean response time will increase in proportion to the fre- 
quency of interrupts and to the length of their interrupt subroutines. 

An interrupt in a single level priority system will have a decidedly 
faster reaction time in a dense interrupt environment if the priority is 
significantly above average. The reaction time in a multi-level priority 
system depends very heavily on priority. The reaction time of the highest 
priority interrupt is a function of interruptibility only. Pemethoseuen 
lower priority, the reaction time will increase only in proportion to 

the frequency of occurrence and Subroutine length of those interrupts of 
higher priority. 

In systems where interrupts may occur only between instructions, 
mean reaction time due to interruptibility is approximately equal to one 
half of the instruction execution time. An increase or decrease in fre- 
quency of points of interruption will change reaction time accordingly. 

Reaction time includes the time that an interrupt is in the defer 
state, Since the computer can react to the interrupt only in the allow 
state. If an interrupt is in the ignore state, reaction time is unde- 
fined, since there is no reaction to ignored interrupts. 

Recognition time. Recognition time is significant only in systems 
which determine the source of interrupt signals by software. As an ex- 
ample, a multiple interrupt with interlock system might be designed so 
that the source indicators are interrogated sequentially by a series of 
instructions until the correct source is found. The recognition time 
would be the time required to execute these instructions. If the example 


system were single level priority, then the recognition time would vary 
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inversely with priority. Determination of interrupt source by hardware is 
a feasible method of reducing response time since this method eliminates 
recognition time. 

Decision time. Decision time 1S finite for allo anterriupts. bites 
length depends entirely on what action is required to process the inter- 
rupt. Decision time can be reduced in some cases by processing the 
critical portion of an interrupt at the” time of oceurrence, "ama deferring 
any less important parts for processing at a later time. These less im- 
portant parts may be deferred for processing by a control program, or by 
a lower priority, self-initiated interrupt (where such capability is 
available). Decision time should be held to a minimum since it affects 
reaction time of lower priority interrupts. 

Overhead 

Overhead is defined as the difference between the time required to 
execute all instructions concerned with an interrupt and the time re- 
quired to execute those which actually process the interrupt request. 
Examples of overhead are the instructions used to determine the source 
of an interrupt, and those which are used to establish recognize/ignore 
and allow/defer conditions. Overhead is obviously closely related to 
response time. However, under certainc:conditions when many interrupts 
are used, overhead could be high enough to markedly degrade computer per- 
formance while response time remained at a satisfactory level. Steps 
taken to reduce response time by accomplishing interrupt housekeeping 
with hardware rather than software will also reduce overhead. 

Instructions used to set up selectivity conditions increase overhead 
without affecting response time, Since these are normally executed by a 


control program rather than by an interrupt subroutine. The use of an 
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exclusive selectivity system will materially reduce overhead, but at the 
expense of more complex hardware. 

The time required to Save and restore registers and indicators is 
also overhead time. This can be reduced by storing only those registers 
which are used by the interrupt subroutine. Some third generation com- 
puters use multiple register-blocks for rapid context switching. Where 
this capability exists interrupts can switch to a different register 
block and thereby eliminate the normal Save-and-restore overhead. 

S atadieaia.on 

Saturation is defined as the condition where information which nor- 
mally enters the computer by or as the result of interrupts is lost be- 
cause of excessive response time. A simple example is the case in which 
the time between succesSive interrupt signals from one Source is greater 
than the required response time for that signal. AS was stated previously, 
however, this condition should not normally exist, since interrupt signals 
from one source usually follow some cyclic pattern rather than being ran- 
dom. When saturation results from multiple interrupt sources, the general 
remedy is to use all possible methods to reduce response time and over- 
head. In some cases saturation can be eliminated by a change in priority. 
For example, af real-time clock pulses which are low in priority are de- 
layed so much that some are lost, the priority probably could be raised 
enough to prevent saturation. Since the amount of processing required 
for clock pulses is usually small, this would have no appreciable effect 
on the response time of other interrupts. 

The above example also illustrates an important concept, namely, 
that the priority assigned to an interrupt does not depend solely on 
its relative importance. Assigned priority should be a function of 
relative importance, frequency of occurrence, processing time, and type 
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SECTION IIT 


USE OF INTERRUPTS IN COMPUTER SYSTEMS 


Interrupt uSage increases in proportion to the interaction between 
the computer and the outSide world. This section will give examples of 
interrupt system utilization in increasing degrees of interaction. 
Input/Output Interrupts 

All computer systems must interact with their environment to some 
degree. The minimum interaction occurs in the so-called "batch pro- 
cessing" system, in which the computer reads in the program and data 
through some peripheral device, solves the problem, and transmits the 
answers to another peripheral device. Interrupts were first used to 
increase the efficiency of these input/output, or I/O, operations. Most 
peripheral devices operate at transmission rates much below that of the 
computer. An interrupt system allows the computer to execute instruc- 
tions at its normal rate during and I/O operation. For example, a typi- 
cal second-generation computer reads paper tape at 400 frames per 
second. This represents an input rate of 100 24-bit words per second, 
or one word each 10 msec. The computer, on the other hand, can accept 
andestoreinput data at®’a rate of approximate] ye200), 000m ~ordemper second, 
or one word every five usec. When the CPU is dedicated solely to reading 
paper tape, it operates at 0.05% of its maximum rate. The common inter- 
rupt scheme described below can eliminate this problem. 

The paper tape reader initiates an interrupt signal to the computer 
each time that a word is ready to be read. The CPU could execute some 
program during the input operation which is not related to the informa- 
tion on paper tape. Receipt of the interrupt signal initiates an inter- 


rupt subroutine to store the word in memory, update the operand address 
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in preparation for the next word, test for end conditions, and return to 
the interrupted program. This operation would take approximately 20 
usec, allowing the CPU to execute the unrelated program at 99.8% of its 
maximum rate. 

The interrupt subroutine execution time can be reduced further by 
having a second interrupt signal initiated by the reader when an end-of- 
message signal is read from paper tape. If a priority interrupt system 
is used, this interrupt will have priority over the word-ready interrupt, 
otherwise the end-of-message signal would be read as data. Ina multi- 
level priority system this second interrupt saveswone imstrwetion for 
each word read, since end conditions need not be checked. This instruc- 
tion would also be eliminated in a single level system, but another 
instruction must be added to the interrupt subroutine to determine the 
source of the incoming interrupt signal. 

Interrupts are used for all I/O devices to increase efficiency. 
When these devices communicate with the computer over separate communi- 
cations channels, separate interrupts must be used for each channel. 
This causes a significant increase in subroutine execution time for the 
single-level priority system, since the recognition time increases in 
proportion to the number of system interrupts. However, such considera- 
tions are significant only from the standpoint of CPU efficiency since 
response time is always adequate and saturation non-existent for I/0 
interrupts. 

On-line Real-time Interrupts 

Interaction with the environment is increased significantly in 
on-line real-time systems. Such systems are used in automatic process 
control, hybrid computation and simulation, and other more specialized 


areas. An on-line real-time computer is defined as one which processes 


28 


data in synchronism with some real-time physical process such that the 
computation results are useful to the process.|1] These systems nor- 
mally transmit data to and from the associated process through A/D and 
D/A converters. 

A typical application of this system is in hybrid simulation, where- 
in the digital computer is interfaced with an analog computer. The 
digital computer is used for calculations that require a high degree of 
precision and for other operations more suited to this method of compu- 
tation. Analog and digital computers are inherently incompatible, since 
the computing time in an analog computer is proportional to physical 
time, whereas computing time in a digital computer depends entirely on 
the speed of the computer and the size of the problem. The normal method 
of synchronizing them is to key the digital operation to periodic timing 
signals furnished by the analog computer, or by some external timer which 
furnishes these signals to both computers. The digital computer for the 
system must have a minimum capability of completing all required calcu- 
lations initiated by a timing signal before the next signal is received. [2] 

Interrupts are universally used to provide synchronization of the 
digital computer in a hybrid system. In the simplest system, the timing 
Signal interrupts the computer to start a calculation cycle. When com- 
pleted, the computer goes inta an idle loop to await the next interrupt. 
Normally the digital computer will be required to perform several tasks 
of various lengths and frequency of occurrence. There are two methods 
of approaching this problem. The first places control in a digital com- 
puter executive program. The computer is interrupted periodically by 
timing signals. The interrupt subroutine records each timéngt pulse in 


a counter and returns control to the executive. The executive program 
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then initiates all tasks to be performed at the appropriate time. The 
second method is an expansion of the one-task system, where each task is 
initiated by a separate interrupt. Use of this second method is manda- 
tory for a system in which the starting time of each digital computation 
is not predictable, but is determined by conditions external to the digi- 
tal computer. 
Time-Sharing Interrupts 

The recently evolved time-sharing computers have the most stringent 
time requirements of all computer systems. In the inter-active time- 
Sharing systems, where many users are on-line simultaneously, each user 
operates some type of console as though he had complete control of the 
computer. The timing of computer operations in this system must be quite 
efficient to give each user a satisfactory response time. Interrupts 
form an important part of this system since many tasks are executed 
asynchronously. Because of the precise timing requirements mentioned 
above, the interrupt system must be as efficient as possible. 

Interactive users in a time-sharing computer system should have as 
much flexibility as possible in software and hardware features. The 
only hardware limitations that should be imposed upon them are basic 
system capability and the necessity for prevention of interference be- 
tween users. If two or more jobs are being performed simultaneously, 
then any one of them must be prevented from stopping the aie or 
placing it in a position so that it is uninterruptible. In additionmee 
these mandatory requirements, other hardware features can be implemented 
to greatly enhance the efficiency of time-Shared operation, and thereby 
reduce response time. 


Each user is normally allotted a certain amount of time known as the 
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time slice, for his exclusive use @f the CPU. Since his) procramenis 
probably be transferred from core memory to secondary storage and back 
again between successive time slices, the time slice should be long 
enough to allow the ratio of computation time to transfer time to be 
reasonable. If it is too long however, the user response time will be 
excessive. Where interrupts are used, they should have minimum overhead 
to maximize CPU efficiency. 

Request interrupts are used in time-sharing systems to signal the 
end of the time-slice, to increase efficiency of I/O operations, to per- 
mit the user to communicate with his programs, and to allow the uSer 
program to request some common service from the control program. If a 
user attempts to interfere with another user's program or execute an 
illegal instruction, this can be efficiently signaled by a fault inter- 
rupt. Time-sharing is one of the special situations where traps can be 
used to great advantage for this purpose. The exclusive selectivity 
scheme can be used to allow the system to accept interrupts from each 
user's console only during noes time slice. 

A t ime-sharing system is said to be multiusage if different classes 
of tasks are performed simultaneously. If one or more of these tasks 
is classified as real-time, then the system presents the greatest chal- 
lenge to the systems designer. Every resource at his disposal must be 
analyzed and implemented with maximum efficiency, not the least important 


of which is the chosen interrupt system. [3] 
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SECTION IV 


PROPOSED DIGITAL CONTROL LABORATORY TIME-SHARING SYSTEM 


The hew computer system for the Digital Control Laboratory (DCL) at 
the Naval Postgraduate School will consist of a Standard Scientific Data 


Systems 930 computer with the optional equipment listed in Table 1. [4] 


I. SDS 930 COMPUTER FEATURES 


The SDS 930 is a fast, small, flexible, second generation computer, 
but one which was developed late in the second generation, and there- 
fore contains features which are more advanced than those of earlier 
machines. 

Time-multiplexed Communication Channel 

The first of these features is the time-multiplexed communications 
channel (TMCC), which can, with interlace, handle I/O at speeds of up 
to 285,714 words per second depending upon the capability of the part- 
icular peripheral device with which the computer is exchanging informa- 
tion. The TMCC may communicate with up to 30 peripheral devices at the 
same time, but the transmission rate is reduced considerably by using 
more than one device at a time. The computer may contain up to four 
TCC's, each with or without interlace. The interlace feature provides 
the CPU with the ability to transfer information by simply setting a 
pointer and counter, then initiating the transfer. The information ex- 
change starts at the location specified by the pointer and transfers the 
number of words specified by the counter, all without further interven- 
tion by the CPU. Furthermore, the CPU is normally notified by the TMCC 
when the transfer has been completed by an I/O interrupt. It should be 


pointed out, however, that for each word transferred, the CPU is not 
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Quantity Description 


1 Time-Multiplexed Communication Channel 
2 8,192 Words (24 bits) of Core Memory 

i} Memory Interlace Oontrol Unit 

IL Real-Time Clock 

1 Interrupt Control System 

6 Priority Interrupt, two levels 

2 Multiple Access to Memory 

u Twelve-Bit Option 

ik Paper Tape Reader/Punch 

1 Keyboard/Printer (Teletype) 

il Card Reader (200 card/minute) 

1 Unbuffered Line Printer (140-160 lines/min. ) 
2 Magnetic Tape Transport (75 ips, 200 cpi) 
i Magnetic Tape Controller 

il Rapid Access Data Storage Unit 

2 High Performance Display Console 

i Memory Interface Controller 

2 CRT Channel 

2 Analog Data Channel 

ik Analog to Digital Converter 

1 Digital to Analog Converter 

il Analog Computer 


Table 1. Digital Control Laboratory Optional Equipment 
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allowed to process instructions for the duration of the transfer, which is 
3.5 usec. The advantage is gained by. the fact. that single word transmis- 
sion of the first data word requires a minimum of 19.25 usec, and each 
word thereafter, in Sequence in memory to the same device, requires a 
Mine Of &./7/5 USEC. 

Programmed Operator 

The next major feature is the programmed operator, or POP. TI€£ bit 
position two of an instruction contains a one, the operation code (bits 
three through eight) is not interpreted normally, but the program jumps 
to the address in memory specified by bits two through eight. This 
allows the programmer to design up to 64 macroinstructions and to gain 
direct access to them through branch instructions located in cells 0100 
through 0177. Control will automat ica lly be returned to the main pro- 
gram upon completion of each macroinstruction. 

Multi-level Priority Interrupt System 

One of the most important advanced SDS 930 features is the multi- 
level priority interrupt system. The computer is capable of handling 
up to 922 separate priority interrupt levels, two of which are standard 
equipment. The interrupts are divided into two basic classes: interval 
and external. 

Internal interrupt. The internal interrupt is concerned with con- 
ditions within the computer and its standard peripherals which cause the 
program in progress to cease in deference to the appropriate interrupt 
subroutine. There are 26 possible internal interrupts. The two which 
are standard equipment are associated with the standard TMCC. There are 
two more optional interrupts for each of the other seven optional communi- 


cations channels. The other four internal interrupts are used for the 
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power fail-safe option and the real-time clock. The power OFF interrupt 
causes the program in progress to stop, and the contents of all important 
registers to be stored in a specific location in memory whenever the 
voltage drops below a certain level. The power ON interrupt causes these 
register contents to be restored to the appropriate registers when the 
voltage aqgain rises above this same level. The real-time clock can be 
used to cause interrupts at the expiration of time periods of specific 
length, or at Specific times of the day. 

External interrupt. The computer has a maximum capacity of 896 
optional external interrupts. All external interrupts are lower in prior- 
ity than any internal interrupt, but otherwise they operate in the same 
manner. 

Normal interrupt. Each separate interrupt has associated with it a 
Specific cell in core memory. When an interrupt occurs, the computer 
halts computation at the end of the present instruction and automatically 
executes the instruction in the memory cell associated with the appropri- 
ate interrupt. The instruction used in an interrupt location is deter- 
mined by whether that level is a normal or single-instruction interrupt. 
A hardware change is required to convert a normal interrupt level to 
single-instruction operation. When a normal interrupt is used, the memory 
cell associated with it must contain a Mark Place and Branch instruction, 
BRM. This instruction, which is similar to the return jump instruction, 
causes transfer of control to the interrupt subroutine. The BRM "marks 
place" by storing the contents of the program counter (which contains 
the address of the next instruction in the main program) in the operand 
of the BRM, then executing the instruction contained in the following 


address. At the end of the subroutine, an Unconditional Branch instruction, 
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or BRU, 1s executed using indirect addressing. The operand address of 
this BRU is the first word in the interrupt subroutine, which in turn 
contains the address of the next instruction in sequence in the main pro- 
gram. In addition, it also automatically clears the interrupt. 

Single-instruction interrupt. The single-instruction interrupt level 
allows execution of only the instruction in the interrupt location. Upon 
completion of this instruction, control is returned to the program pre- 
vious ly being executed by calling the next instruction indicated by the 
program counter. The program counter is not altered by the housekeeping 
associated with the execution of the single interrupt instruction, nor 
by the execution of any instruction in this mode. As an example, the 
execution of a Reduce Memory, Skip if Negative instruction, SKR, in the 
CLOCK PULSE interrupt location, cell 075, causes the following special 
sequence. The operand is decremented by one, the interrupt is cleared, 
and control is returned to the main program. The SKR normally skips one 
instruction if the operand is negative after having been decremented, but 
in this special situation, if a negative count occurs, the skip is in- 
hibited and a CLOCK SYNC interrupt is initiated. This interrupt causes 
execution of the instruction in cell 074. This is the method used to 
interrupt a program after a given elapsed time. An integer equal to the 
number of 16.67 msec intervals desired minus one is entered in the oper- 
and of the SKR instruction. When this cell becomes negative, a normal 
interrupt occurs which signals the end of the time period. 

Selectivity. The interrupt system is equipped with the general 
allow/defer selectivity feature, which for this computer is called enable/ 
disable. The general allow/defer is under program control, but the pro- 


grammed defer may be overridden by a manual allow switch available to 
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the operator. 

The individual recognize/ignore, here called arm/disarm, is avail- 
able aS an option, but is not included in the DCL system. However, the 
two real-time clock interrupts are equipped with a group recognize/ 


ignore under program control. [5] 


II. SDS 930 COMPUTER OPERATION 


The following paragraphs will describe generally how the CPU func- 
tions, the logic of the interrupt system, and what effect the interrupt 
System has on CPU operation when an interrupt occurs. 

Central Processing Unit Operation 

Each machine instruction is executed during an integral number of 
1.75 usec machine cycles. Each cycle contains eleven timing pulses, 
designated T8,T7,....,T0,Tr,Tp. These pulses are generated by a six 
flip-flop pulse counter (Q1-Q6) which is fed by a 6.28 mHz crystal oscil- 
lator. During execution of any given instruction, each machine cycle is 
assigned one of eight possible phases, 90,91,....,97. The phases are 
determined by a three stage counter (F1-F3) which is advanced to the next 
appropriate phase, usually by the Tp timing pulse, depending upon which 
instruction is being executed. Each action taken by the computer is 
triggered by the presence of a specific timing pulse during a specific 
phase of an instruction. 

The 930 word is 24 bits long. The instruction format is as indi- 
cated in Figure 1. The CPU contains the following 24 bit registers: an 
exchange register, C, an accumulator, A, an accumulator extension regis-~ 
ter,@B, and an index megister, xX. Thegprogram address counter er... aid 
storage address register, S, are 15 bits in length; the operation code 


register, 0, comtains 6 bits. These registegs generally operate Pike 
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= 1 : operand is to be modified upon relocation 


il = 1 : indexing is to be used 
2 = 1: theSeerstruction ws a*programmed operator 
3 
Six bit operation code 
8 
9 = 1 : indirect addressing to be used 


14 bit operand address 


23 





Figure 1. Instruction Format 


those of any normal second generation computer, except that data is 
transmitted between the 24 bit registers in a serial-octal mode, or three 
bits at a time. The sending and receiving registers both shift three bit 
positions during each transmission, and the process continues until each 
register has been shifted 24 bits. The use of clockdflip-flops allows 
information to be exchanged between two registers without intermediate 
storage since old information may be transferred out of a flip-flop at 
the same time that new information is is inserted without mutual inter- 
ference. 

Certain operand addresses are transmitted from one register to 
another, in serial~-octal mode, through a three stage full adder. As an 
example, when a branch instruction is executed, the operand address in 


C™re’ sent™to P, three™brts=at ay time, “through tne rull addervrr ne three 
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least significant bits of C (C21-C23) form the augend inputs to the adder, 
the addend inputs are disabled, and the output sum (Addl - Add3) goes to 
the three most significant bits of P (PO-P2). If indexing is used in a 
branch instruction, the addend input from X is enabled, thereby allowing 
the contents of the index register to be added to the address as it is 
being transferred. This allows indexing to be performed with no increase 
in instruction time. 

The path for all words to and from memory uses parallel transmission 
between C and the memory data register, M. Other data transfers which 
use parallel transmission ares: the opcode from C to O, and operand ad- 
dresses from C or P to S for storage reference. 

The last phase in any instruction is designed as the End phase in 
addition to be assigned a number. When an instruction other than a 
branch or skip is executed, housekeeping to prepare for the next instruc- 
tion, NI, is performed during End. This housekeeping normally consists 
of the following operations: (1) P is incremented by one to reference 
the next instruction in Sequence, (2) P is transmitted to S to provide 
storage reference, (3) the contents of the address in S is loaded from 
memory into M, (4) the instruction in M is transmitted to C, and (5) the 
phase counter is reset to YO. The next phase will then be the first 
phase, or YO, of NI. The firstpeiming pulse of this phase, or 13990, 
transfers the opcode.ftrom C to 0... Meminstruction being executed then 
determines the action to be taken by the CPU. [6] 

Interrupt Control System Operation 

Normal interrupt. The logic for level 34 of the interrupt control 

system, ICS, is shown in Figure 2. An interrupt request for this level 


must consist of a one (+4 volts) at (£34) . This request should be held 
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Figure 2. 
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in the one state for at least 1.75 usec, then cleared as soon aS possible. 
When (738) is true, Is34, the level 34 interrupt storage flip-flop, will 
be set by the trailing edge of the next TO timing pulse. Is34 indicates, 
when set, that an interrupt has been received on level 34 that has not 
been processed. If no higher level interrupt is waiting or being pro- 
cessed, the interrupt signal, Ir, and the storage address unique to level 
34, 0235, are sent to the CPU. If the interrupt system has been enabled, 
the present instruction is not an EOM, and an interlaced I/O operation is 
not taking place; then Ir sets Int, the interrupt flip-flop in the CPU. 
The necessary conditions to set Int (designated sInt) are shown in the 


following logic equation: 





sInt = (@5 01 05 Ts O1) T4 End [ Ts + Ir (En + €n) )| Ts. (1) 


Once Int is set, the normal signal which causes P to be transmitted to 


See Spat Enda suis inhibited: 
Sxp = T3 Int (End + Ju Bax) Go + T3 (Kme) . (2) 


Instead, a signal, Sxn, is generated to transmit the interrupt address, 


N5-N14, to S:; 
Sn = 13 Intewinm- (3) 


In the example of an interrupt to level 34, Sxn causes the address 0235 
to be transmitted from the N cable receivers to S. Inr, the interrupt 


interlock flip-flop, is always set six timing pulses after Int 1s set: 
sinr = Tp) Ime. (4) 


Inr prevents Sxn and other interrupt initiate signals from being genera- 


ted during subsequent phases. 


4) 


The next timing pulse after sInt causes an interrupt recognition sig- 


Nal, le; to be sent to the ICS: 

Rew=eint inr Tic >) 
where Ti is true from T3 through TO: 

Tig=@06e01. (6) 


je sets Ip34, the level 34 Interrupt process flip-rlop, if no higher 
level interrupt is in the waiting or active states. Ip34 indicates that 
the CPU is now processing the interrupt subroutine initiated by this 
level, and disables Ir and N5-N14. 

The CPU now proceeds to execute the BRM which must be located in 
0235. This instruction transfers™@entrol to the appropriate subrourtimge 
as previously described. During YO of the BRM, Int and Inr are reset 
(designated rInt) so that normal CPU operation may take place while exe- 


cuting the interrupt subroutines: 
hehe = wllqy ee IPMS (elope (St) . (7) 


Otherwise Int would inhibit the transfer of the address of NI from P 
(eis) Se 

The indirectly addressed BRU at the end of the subroutine, in addi- 
tion to returning control to the main program, also sends an interrupt 


termination Signal, Ib> to the I@e-: 
Ib = #0 Ta O01 (02 04 05 06) Ts Ti + Ij Ts End Inr Ti. (8) 


Ib resets the process and storage flip-flops, provided that no higher 
level interrupt is in progress. This indicates that the interrupt has 


been returned to the inactive state. Tf (34) is still true during the 
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phase after Ib is received by the ICS, the interrupt will be repeated. The 
optimum pulse length for an interrupt signal is therefore 1.75 usec. 
Single-instruction interrupt. A normal interrupt may be converted 
to a single-instruction interrupt by inserting a connection as indicated 
by the dotted line in Figure 2 to furnish the single-instruction inter- 
rupt signal, Ij. Any instruction requiring two or more machine cycles 
may be used in the memory cell assigned to a single-instruction inter- 
rupt, but the normal use of this type of interrupt uses an SKR instruction 
to decrement a counter. 
When a normal skip instruction is executed, P is increased by one 
by the P + Ll adder during the next»to last»phase in order to address the 
next instruction. In any phaSe where a P + 1 is possible, P is right 
circular shifted five times, three bits at a time. P is increased by one 
if the indirect address flip-flop, Ia, is set when this shift takes place. 
During this same phase the condition which could cause the skip is checked. 
Tf satisfied, Ia is set during the last phase by the skip flip-flop, Sk, 
to cause P to be increased by one again, thereby causing NI to come from 
eel P + 2 rather than P+ lee Forsan sSKR instruction, pSoeicese Ge 


phase four if M is negative: 
sSK =... + @4 01 05 06 Tr CO +... , (9) 


where CO is the sign bit of C which is enabled when C contains a nega- 


tive number. Sk in turn sets Ia during End (@7): 


sia - so. Ff LOU? oR (Kr) Clee Inr) 


+T8 (G4 + G6) Kr) (Tj + Inr) + ... (10) 


and the skip is effected. 
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When SKR is executed as a single-instruction interrupt, its operation 
is altered. During @4 and @7, the presence of Ij causes (Ij + Inr) in 
Eee tue tO be false, since Int Es true only during YO, and” P is not modi-~ 
fied during the SKR execution. Control is therefore returned to the next 
instruction in sequence in the main program upon completion of the inter- 
rupt. The single-instruction interrupt termination is caused by the 
presence of I} in the second term of Eq. 8, and oceurs regardless of the 
instruction executed. 

Real-time clock interrupts. The real-time clock uses two special 
interrupts: one normal and one single-instruction. The A~C line voltage 
1s stepped down to 10 volts peak-to-peak and clipped to provide a square 
wave as a timing Signal, Rtc;? fo°the real-time clock control cirem@c. 

This’ control circuit consists™E£ three fPip=flops, REVS REZ and’ kts. eee 
ils set under program control when the real-time clock is armed. Rt2 is 


set at the first Ti during Whe peSitive half Of*Rtc: 

sRt2 = Rt2 Rtc Ti. Gi. 
When Rte goes to zero one half cycle later, Rt3 is set: 

sRt3 = Rtl Rt2 RES Ree Ti, (125 
but remains set for only one phase: 


TRes = Rte 11 + cL. (13) 


Rt3 thus serves as a 1.75 usec interrupt request, CLOCK PULSE, which 
occurs every 16.67 msec (1/60 sec); it sets Is8 at Ti time to trigger 
the single-instruction interrupt located in cell 075. If this instruc- 


tion is an SKR, it operates as previously described, except that the 


Ay 


following Signal is generated if the effective memory location is reduced 


to a negative value: 
Biet = SkO7 elma (14) 


Ski 1s the CLOCK SYNC interrupt request to Is7 which Signals that the 
elapsed time interval set in the effective memory location is completed. 
This normal interrupt, located in cell 074, causes the desired action to 
be taken at the end of the interval. 

Both real-time clock interrupts are always enabled, Since the inter- 
rupt signal they send to the CPU is Is rather than Ir. As shown by the 
bracketed term of Eq. 1, only Ir requires that the ICS be enabled by the 
program controlled enable flip-flop, En, or the console enable switch, 
Gn). [7] 

IIIT. DIGITAL CONTROL LABORATORY SYSTEM OBJECTIVES 

The basic objective of the DCL installation is to simultaneously 
perform in the priority order indicated (1) hybrid computation in con- 
junction with a Comeor analog computer, (2) interactive program compo- 
sition, checkout and execution at two display consoles, and (3) background 
batch processing of jobs with one of two possible priorities. In consid- 
eration of these tasks and the equipment available in the system, several 
hardware modifications involving interrupts are proposed for future im- 
plementation into the DCL system. These modifications are (1) a mode 
of operation for interactive users and batch processing in which restric- 
tions are placed on the instruction repetoire and access to certain pro- 
tected portions of memory, (2) the mechanism for detecting illegal 
instructions and (3) memory protect violations: while in this mode, (@) a 


second real-time clock which signals completion of a user's time quantum, 
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and (5) the circuitry to allow sequences of normally non-interrupt ible 
instructions to be interrupted. 
Purpose of Modifications 

The following paragraphs will analyze the proposed overall system 
philosophy and the reasons for each modification. 

The hybrid computation has highest priority because it is a real- 
time process. In a real-time system, Since the computer must be able to 
respond to external stimuli fast enough so that information is not lost 
and/or that answers are provided to the external equipment in time to be 
of value, all display console and batch computation should be performed 
during hybrid computation idle time. When the CPU is not involved in 
hybrid computation, the execution control system should transfer control 
to one of the two console users on a round robin basis. If any idle CPU 
time remains, it should be scheduled for use by the background batch pro- 
cess, 

Multiple operating modes. The assumption is made that all program- 
ming for the executive control system and hybrid program will be suffi- 
ciently error-free so that computer hangups and mutual interference will 
not occur. It is also assumed that these two programs will reside in a 
protected area in memory at all times; the control system must remain 
there to retain control, and the hybrid program must remain there to pro- 
vide adequate response time. These two programs will therefore operate 
in the executive, or normal, mode as distinguished from the user mode. 

When the computer is in the executive mode, its operation will be 
identical in all respects with the standard SDS 930. This is necessary 
so that all standard software will be useable without modification. The 


executive control system will shift to user mode under program control 
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at the start of the user time quantum. Control will shift back to execu- 
tive mode automatically when (1) the time quantum is completed, (2) an 
interrupt occurs, (3) a privileged instruction is executed, or (4) a pro- 
tected memory cell is referenced. 

Privileged instructions. Since timing is so critical in a time- 
Sharing system, each user must be restricted in his use of instructions. 
This implies, in effect, that a user may uSe his time to perform useful 
computation, but he must be prevented from "wasting" time. Therefore, 
all I/O operations must be performed by the executive control program, 
which can be programmed to do I/O very efficiently. The user must be 
prevented from inadvertently executing I/O instructions, as well as halt 
and illegal instructions. The execution of any of these would waste 
time. The privileged instruction modification is proposed to prevent 
the user from executing these instructions. 

Memory protection. The user must also be prevented from destroying 
the executive control program or the hybrid program. The only positive 
means of accomplishing this is to add a feature that will stop the user 
before he executes an instruction which references illegal memory and to 
notify the executive control program when this happens. The executive 
can in turn notify the user of his error so that it may be corrected. In 
the meantime, continuity of computer operation is maintained. 

Quantum timer. Since the system real-time clock will be an integral 
part of the hybrid system and will probably be used to provide absolute 
time for most problems, a second clock, programmed as an interval timer, 
is necessary to interrupt a console user at the end of his time quantum 
so that control may be shifted to the other user console. 

Non-interruptible sequences. The computer system can be effectively 


disabled by the execution of a long or infinite chain of indirect addressing 
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or Execute inStructions. Neither chain is interruptible, so a user may 
gain complete control of the system in this manner. To prevent this, 
the non~interruptible sequence modification permits such chains to be 
aborted and interrupted when the computer is in uSer mode. 

Some of these modifications are similar to features of the SDS 940 
computer system. This system, designed at the University of California, 
Berkeley, is a time-Sharing version of the SDS 930 which can accommodate 
32 interactive users. The features which are important from the stand- 
point of time-shared operation are a memory map used in conjunction with 
a 64K word magnetic core memory, a large rapid access data Storage unit 
for secondary storage of user programs, a specially designed asynchronous 
communications controller, three modes of operation, system programmed 
operators, privileged instructions and an instruction interruptibility 
feature. [8] 

The proposed modifications can be implemented using SDS T Series 
logic modules. These modules are available in flexible configurations of 
both positive and negative logic and are fully compatible with SDS 930 
CHimeudrIcrys [9] 

IV. PROPOSED LOGIC DESIGN CHANGES 

The remainder of this section describes the proposed modifications 
as changes to the SDS 930 logic equations. New logic terms in existing 
equations, and new equations are indicated by underlining. 

Multiple Operating Modes 

Method. The mode of operation is determined by the state of the 

mode flip~flop, Mo: 


Mo = Executive mode 


N 


Mo User mode. 
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All of the changes and additions to the SDS 930 logic will be enabled by 
Mo. 

The transition from executive to user mode will be effected by the 
execution of the following EOM instructions: 

QO 02 20040, 


When this instruction is executed, Mo will be sets: 


SMo = femeGiGsC1!i C18 16, C15) 
where 
Eom = (05 01 05 Ts (2 05) G4) + 5... (16) 


which 1s the enable for an EOM instruction. A branch instruction to a 
location in the users program area must immediately follow the EOM; other- 
wise a memory protect violation will occur. Retrieval of the branch 
instruction itself from memory will not cause a violation for reasons to 
be explained later. 

Logic. The logic required for this modification is one flip-flop 
and four NAND gates. 
Privileged Instructions 

Method. When the computer iS operating in the user mode, instruc- 
tions which halt the computer or reference external equipment, and in- 
structions with illegal SDS 930 opcodes are called privileged instructions. 
Execution of a privileged instruction causes a trap to occur. A trap as 
defined here can interrupt another interrupt of any priority, and its 
execution does not in any way inhibit other interrupts or traps from being 
recognized and executed immediately when received. Privileged instruc- 
tions aré listed and identified in Table 2: 

When a privileged instruction trap occurs, the privileged instruc- 


tion is converted to a NOP, and the instruction in memory cell O40 is 
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Opcode 


00 


O02 


03 


O4 


O5 


06 


07 


10 


ile 


diye 


2 


15 


Zell 


22 


Det inition 


Halt 


Opcode 


24 


Energize Output Multiplex 25 


Illegal 

Tllegal 

Il legal 

Energize Output Direct 
Tllegal 

Memory into Y Channel 
Illegal 

Memory into W Channel 
Parallel Output 
Illegal 

Illegal 


Illegal 


Table 2. Privileged Instructions 


50 


26 


2, 


30 


Sul 


Cy. 


ee 


34 


40 


42 


4d 


45 


47 


Definition 


Tllegal 

Tllegal 

Illegal 

Illegal 

Channel Y into Memory 
Tllegal 

Channel W into Memory 
Parallel Input 
Illegal 

Skip is Signal Not Set 
Illegal 

Illegal 

Illegal 


Illegal 


executed. This trap instruction should normally be a BRM, which will 
Store the address of the privileged instruction and branch to a subroutine 
which will inform the user of the violation. 

Execution of a privileged instruction generates a privileged instruc- 


tion decode, Pid: 


Pid = C3 C5 C6 
+ C3 C5 C6 





JuCseCines Cymae 


+ C3 C4 C5 C7 C8. (17) 


Pid is enabled from C rather than O so that it will be present at T8 @0, 
which is the timing pulse that causes transmission of the opcode from 
C to 0. If the computer is operating in user mode and indirect addressing 


is not being used, Piq 1S generated: 


Piq = Pid Mo Go C2 GO T8 Ta. (18) 


Pig sets the privileged instruction flip-flop, Pi: 


SsPi = Piq, (19) 
and prevents initiation of the normal instruction execution. The trans- 


fer of the opcode from C to O 18 inhibited by Piq: 


Oxe = 00 T8 Ta Go C2 Piq Ob Ai . (20) 


2 


Oxc 1s always preceeded by a clear O signal, Oc, during the last timing 


pulse of EHerEnd "eycle: 


Oc = Tp End a CO) 
Oe clears all stages of O except 02, which it sets: 

s02 = Oce (225) 
Clear O therefore actually sets 0 to 020, which is the opcode for a NOP 


instruction. Under normal conditions if an opcode whose second bit 


position contains a zero is sent to 0, a zeroS transmisSion occurs: 


rO2 = Oxc C4. (23) 


The first phase of the privileged instruction, 90, has now been con- 
verted to the first (and only) phase of a NOP. Normally, @O of NOP is 


immediately converted to 95: 


Sl = GO@ES 4 Comeseee (C3 + Cl) =e (24) 
SPS. = 0OMlee rs C2 65 6S (es © Cl) 4 ane (25> 


Since this special NOP opcode was never in C, the above transition does 
not occur, and the phase counter must be forced to 95: 
SET = ... ot Piguet e(OD tae) ae. - - (26) 
SF3 = ... + Piq + T8 (Ob + Al) +... . (27) 
During execution of an instruction whieh does not reference memory, yr 
is normally incremented by one (P + 1) during the first phase to obtain 


NI. In this case NI will be a trap instruction, so Piq inhibits slaguigeam 


in turn prevents P + ls: 


sta = --. + [90 Ta 18 C2 G5 CB (C3 + H)| G Pi Ob AT Pig + ... 
(28) 


P + 1 is inhibited so that the address of the privileged instruction 
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will be in P when the trap occurs. 

The only other significant task of NOP is to transfer the address 
of NI from P to § and initiate a memory read operation. This transfer 
must be inhibited by Pi: 


Sxp = T3 Int (End Pi Ob + Ju Eax) Go. (29) 


Since S is cleared at TH: 


Sc = TH Gnd + Flga?) sine + =e. , (30) 
the underlined portion of the following equation sets S equal to O40: 
sS9 = sxc C6 
angi J2i3 
+ Sxn NY 


+ §x48 


4+ 


T3 @2i +, 0b). C3) 


Since cell O40 is in protected storage, the computer must be shifted from 


user to executive mode at T3 to prevent a user mode memory violation: 
rMo = T3 Gea 0b) +9 . (32) 
Pi is cleared at T2 to remove all indications that a trap has occurred: 
rPi = Pi T2. (33) 
At Tp, the BRM in cell O40 is transferred from the memory register to C, 
and is executed during the next phase. The BRM stores the contents of 
P in the operand, M, and takes the contents of M+ 1 as NI. 
Logic. One flip-flop and 17 NAND gates are required to accomplish 
this modification. 


Memory Protection 


Method. Certain partions of memory may be designated as protected 


areas by the computer operator. These protected areas may be manually 
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selected by an eight-position, three-level rotary switch. Each switch 
position decodes to a different combination of three signals, 

- » as shown in Table 3. This flexibility in the size of 
protected memory is provided to allow for changes in size of the execu- 
tive control system and the hybrid program. 

Tf an instruction attempts to read out of, write into, or execute 
a subsequent instruction from protected memory, the computer will revert 
to executive mode and trap to location O41. 

A memory reference is normally made twice during instruction execu- 
tion. The first occurs during YO when the instruction carries out the 
appropriate operation with the operand; the second reference, which 
always occurs during an End phase, is made to retrieve Ni. These two 
references are the same for a normal branch instruction, since the oper- 
and is taken as NI. Some instructions use the operand address for pur- 


poses other than memory access, and therefore reference memory only once. 


Switch Decoded Protected User Memory 
Position Out put . Memory Addresses Available 
Lh None 16K 
2 00-03777 14K 
3 00-07777 12K 
4 Mpl 00-013777 10K 
5 00-017777 8K 
6 00-023777 6K 
7 00-027777 4K 
8 00-033777 2K 


Table 3. Memory Protect Switch Positions 
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If S contains an address in protected memory at any time, a protect 


memory enable, Pme, iS generated: 


Pme = 


4 (E) : 
he ae 
S| 
No 


SI 


(E) (5) (E) 


4 
4 


(=) (E) ( 
JOOe 

1 8) ®@ 

Se 

al | 


ig 
| 

Z 
# 


(34) 


Since § is always cleared at T4 and set to the appropriate memory 
address at T3, an illegal address detected at T2 will be used to set the 


out-of-bounds flip-flop, Ob: 
sOb = Pme Mo End T2 Int + Pme Mo #0 T2 RCH NOP EAX (BRX Xwl) , (35) 


where the capitalized terms are enables for the indicated instructions; 


RCH = 01 02 03 O4 (36) 
NOP = 01 02 03 (37) 
EAX = 01 02 03 04 05 06 (38) 
BRK = Ju O1 05 (39) 


The Register Change instruction, RCH, and NOP are the only two non- 
privileged instructions which do not use the operand address for a mem- 
ory reference. The Copy Effective Address into Index Register instruc- 
tion, EAX, reads the contents of M, but never uses it. The Increment 
Index and Branch instruction, BRX, only branches if bit nine of X con- 
tains-a one. If this bit, which is im Xwl at T2, 1s a zero, the branch 


is inhibited. In this case BRX Xwl would prevent Ob from being set, 
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since no reference is made to the protected location. 
Peeeretseset at Ende trarsrer o. NI-trom CG to Ors inhibited by 


Oy aS indteated in Eq. 20, and 0 is set to O20) bymc> 
Oege ree Ip (Ob + AL). (40) 


insOb is set at G0 [2 the present instceuceiommes aborted by Oc 
(Eq. 40) and a NOP occurs during the following phase. If indexing is 
used in the aborted instruction, the illegal address determination is 
made using the effective address after indexing, since the address por- 
tion of X 1s added to the address portion of Caduring GO T/-T3. 

If the aborted instruction is one which normally writes information 
into memory, the operand is protected by Ob, which inhibits the transfer 


Ero tO Ts 


Mxe = Ob | Ton (Qu + Rax + Ju O1 05) + Tsm RO + kn) | r (41) 


Mxc is also an enable for a memory write operation. Its absence converts 
the memory reference from a clear-write cycle to a read-restore cycle. 
The operand is therefore read from memory into M and restored to memory 
without modification. 

The operation of the memory protection NOP is similar to that of the 
privileged instruction NOP in that Ob (1) advances the phase counter to 
phase five (Eq. 26 and 27), (2) inhibits the address transfer from P to 
S (Eq. 29), (3) reverts to executive mode (Eq. 32), and (4) sets § to 


the trap address, O41, by Eq. 31 and: 


sSl14 = ... + T3 Ob. (42) 
Changes to the memory protection trap operation must be made for 
the BRM instruction. Since BRM stores the contents of P in the operand, 


it exchanges the contents of P and Cl0-C23 during the first phase. If Ob 
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is set at GO T2, this indicates that the initial contents of P are about 
to be stored in an illegal address. If the BRM is aborted as described 
above, the P will contain the operand address of the offending instruction 
rather than its location. This situation is corrected by the following 


logic changes. 
At the same time that Oc sets 02, a signal is generated to set 06: 
s06 = Oxc C8 + Gc Ob Ju 01 05 , (43) 
which causes the address portion of C to be transferred back to P. C 
and P are not exchanged at this point, since the operand address is not 
only no longer needed, but it may have been changed if indexing was 


used. Since P is shifted during the NOP by Pr3, the transfer is effected 


by shifting C: 


Cr3 = ... + 95 Ob 06 Ts Ql +... ; (4.4) 


and enabling the transfer from the full adder to P: 


sPO = Pr3 [ addi (onus OOS ) as mr é (45) 
rPO = Pr3 [ Addl (... + Ob 06) + ---| . (46) 


Similar terms are used in the equations for Pl and P2. 

When executive control system executes the EOM to cause the transi- 
tion to user mode, Mo is set at TO of the EOM. The retrieval of NI 
(the branch to the user area) does not cause a memory protect violation 
Since sMo comes two timing pulses too late to cause Ob to be set (Eq. 35). 
However, the branch instruction must have a non-protected (user area) 
address to prevent a violation from occurring during its execution. 

Logic. One flip-flop and 17 NAND gates are required to accomplish 
this modification. 


Quant um Timer 


Method. The user time quantum is measured by the second real-time 
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clock, which will be programmed as a subjective clock, or interval timer. 
This clock, known as the quantum timer, is triggered by an SDS T Series 
Medium Frequency Clock Oscillator, Model CT16. ‘The output from the 

CT16, Qtc, is a four volt peak-to-peak, 8 kHz gare wave. The quantum 
timer control circuit consists of four flip-flops, Qt1l-Qt4, which convert 
OEGeto Imnterrupe Signals. PTes"operation 1S Similar To tirat of the real 
time clock control circuit, except that Qtl and Qt2 are wired as toggle 
flip-flops in series to step down the frequency. The output of Qt2 is 


a 2 kHz square wave. Qt3 and Qt4 operate as follows: 


sQt3 = s@i8 Ob2 Ti (47) 


rot3 = 0t3 Ot4 Ti + (48) 
sQt4 = Qt3 Qt4 Qt2 Ti (49) 
rot4 = Ot4 Ti + (50) 


Qt4, a 1.75 usec pulse which occurs every 500 usec, is the request to 


the lowest priority external interrupt when in user mode: 
= Mo Ot4 . 3) 1D) 


The use of Mo here effectively ignores the quantum timer in execut ive 
mode. 

Interrupt level 24 is wired as a single-instruction interrupt. The 
memory cell associated with this eer 0213, will contain an SKR in- 
struction whose operand is a measure of the user time quantum. This oper- 
and is decremented every 500 usec while in user mode. When it becomes 


negative, it enables Sku: 
Ska = Sk 0/7 Ljetmr [p2a; (52) 


which is the interrupt request to level 23. Since Ski would also be 


enabled at this time (Eq. 14), it must be modified to prevent the 
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expiration of the time quantum from triggering the CLOCK SYNC interrupt: 
Ski = Sk 97 Ij Inr Ips. (55) 


If an interrupt occurs when the computer is in user mode, an auto- 


matic transition to monitor mode is made: 
rMo = ... * Tr Mowine. (54) 


However, if the interrupt is of the single-instruction type, the computer 
must automatically return to user mode Since a memory protect violation 
would otherwise occur when NI is referenced after the interrupt instruc- 
tion. Retrieval of the interrupt instruction itself will not cause a 
memory protect violation since Int inhibits the setting of Ob at End T2 
(Eq. 35). This automatic return is accomplished by the following pro- 
cedure. The occurrence of a single-instructicn interrupt in user mode 
sets Usi: 

sUsi = Mo Int Ij Tr (55) 
at the same time that Mo is reset. If Usi is set, the interrupt termi- 
nation signal causes a shift back to user mode: 

SMo = ... + Usi Ib , and (56) 
resets Us1: 

Bust = lUisawib.. (57) 

Interrupt level 23 is the normal interrupt which signals completion 
of the time quantum. This interrupt operates like other normal inter- 
Bupts. It can only occur in user m@de, Since it 18 triggered by =a )ouemae 
which is initially recognized by Mo. The interrupt subroutine for level 
23, which will normally be used to swap users in and out of core, must 
contain and EOM instruction to shift back to user mode, if such a shift 


is desired. 
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Logic. One oscillator module, five flip-flops, and 11 NAND gates 
are required to accomplish this modification. 
Non-interruptible Sequences 

Method. Sequences of multilevel indirect addressing or Execute 
instructions, EXU, are normally not interruptibté. The design changes 
described in the following paragraphs allow these sequences to be inter- 
rupted while in user mode. If an interrupt is received, the offending 
instruction 1S aborted, and an interruptible NOP is executed in its place. 
Upon completion of the interrupt subroutine, the aborted instruction is 
executed again from the beginning. 

T£ am EXU or an indirect addressing instruction is being executed 
when an interrupt signal is received, the allow interrupt flip-flop, Aji, 


is set: 


sAi = [Ir(En + ) + Is] YO TO TInt Mo 
(La RCH NOP + O1 02 03 O4 O05 06). (58) 


Ai resets the indirect address flip-flop on the following timing pulse; 
Blass OAL Te. (59) 


The NOP is forced at Tp (Eq. 40) and unwanted microoperations which may 


have been initiated by the setting of Ju and Eax from C are inhibited: 


sJu = (G0 T8 Ta Go Ge G0 T8 Ta Go C4 C5 C8 Co 


+ G0 T8 C9 02 03) Ob Pi Ai Piq . (60) 
sEax = (G0 T8 Ta Go) C2 + (G0 T8 Ta Go) C3 C4 C5 Cé G7 C8 CO 
+ (G0 T8 C9) 01 02 03 O4 05 06 Ob Pi Ai Piq. (61) 


Oxe and sIa are inhibited by the same logic used for a trap forced NOP 


(Eq. 20 and 28); inhibiting the latter causes the aborted instruction to 
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be repeated after the interrupt is cleared because it prevents the P + 1 
increment. The phase counter is also advanced to @5 (Eq. 26 and 27). 

The only function performed by the NOP is to get interrupted. Re- 
trieval of the interrupt instruction does not cause a memory protect 
violation because Int inhibits sOb (Eq. 35). Ai is reset at T3 and the 
computer is shifted back to executive mode at Tr of the NOP (Eq. 54). 

If the interrupt was not single-instruction, the interrupt subrou- 
tine must contain an instruction to shift back to user mode. The deter- 
mination of which mode was interrupted can be made by examining the 
operand address of the first instruction in the subroutine. If that 
address is not in protected storage, then the computer must have been 
in user mode. 

Logic. One flip-flop and seven NAND gates are required to accomplish 


this modification. [10, 11] 
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Ve SOFTWARE EQUIVALENTS 


The following comparative analysis between the foregoing proposed 
modifications and the accomplishment of the same objectives with soft- 
ware is presented to demonstrate the desirability of these hardware 
modifications. 

Multiple Operating Modes 

The absence of hardware changes precludes the use of the two-mode 
concept. The user mode is implemented solely to allow the other modifi- 
cations to apply only to the display console users and the batch proces- 
sing jobs. There is no software equivalent to the user mode hardware. 
Privileged Instructions 

Detection and prevention of the execution of privileged instructions 
can be feasibly implemented only by allowing the user to program through 
a compiler. If the user is restricted to a conversational subset of 
FORTRAN, for example, the privileged instruction protection will auto- 
matically exist, Since all such instructions will be excluded from the 
allowable object code. In addition, since each legal FORTRAN statement 
generates a legal, executable set of machine instructions which is free 
of errors, the object code will not contain inadvertent jumps into data 
areas with the usual disastrous results. 

Tf the conSole user is allowed to use an assembly language, the 
assembler can restrict his use of machine instructions to any desirable 
subset. It cannot, however, prevent his executing a jump to an address 
which does not contain an assembled instruction. If this should happen, 
not only will the user's program be destroyed, but a privileged instruc- 


tion execution is almost certain to result. 
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Memory Protection 

Memory protection can be provided for user programs only by restricting 
his operations to compilers. If an assembler is used, it could prevent 
the assembly of instructions into protected memory, but it could not de- 
tect operand addresses which would cause violations. Even if all abso- 
lute operand addresses were screened, the effective address resulting 
from indexing or indirect addressing could be quite different. In addi- 
tion, operand addresses themselves can be modified during program execu- 
tion. In view of the foregoing, it is virtually impossible for an 
assembler to detect beforehand when a memory violation will occur. 
Quantum Timer 

The quantum timer could be implemented with an elaborate real-time 
clock subroutine, but the highest frequency clock pulses used anywhere 
in the system would be required to initiate the subroutine. Since this 
subroutine would have to fulfill all the timing needs of the entire sys- 
tem, it would have a significantly long decision time. This high 
interrupt frequency and long decision time in combination would result 
in excesSive overhead. 
Non-interruptible Sequences 

Non-interruptible sequence prevention by software is subject to 
restrictions similar to those noted for the above modifications. Again, 
a compiler can control the situation whereas an assembler cannot. It 
is also impossible to detect this condition in a program prior to execu- 
tion. The only significant difference in this case is that such sequences 
are not nearly as likely to occur as privileged instructions and memory 


violations. 
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SECTION V 


CONCLUSION 


Interrupts have been shown to be indispensable in time-sharing 
computer systems. The majority of jobs performed in a time-sharing 
environment require a high degree of interaction with the outside world. 
In addition, the housekeeping involved with program switching and detec- 
tion of illegal operations can both benefit from efficient interrupt 
systems. The demands for fast response time and low overhead dictate 
that time-sharing interrupt systems be as efficient as possible. 

The requirements for efficiency in the proposed DCL time-Sharing 
scheme will be much less severe than in other systems because of the 
small number of users. While Similar operations could be performed 
subject to the restrictions noted in the previous section, the imple- 
mentation of the proposed modifications would permit not only higher 
efficiency, but a vehicle for the study and development of improved 


time-sharing software and hardware concepts. 
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Mnemonic 


ABC 
ADC 
ADD 
ADM 
AIR 
ALC 0 
ASC 0 


BAC 
BETW 
BETY 
BPTI 
BPT2 
BPT3 
BPT4 
BRM 
BRR 
BRTW 
BRTY 
BRU 
BRX 
BTT 0,n 
CAB 
CATO 


CAX 
CBA 
CBX 
CET 0 


CFT 0,1 
CIT 0 
CLA 
CLB 
CLR 
CLX 
CNA 
CPT 0,1 
CRT 0,1 


APPENDIX I 
SDS 930 OPERATION CODES 


Instruction Code 


0 46 00005 
7 
2) 
63 
0 02 20020 
0 02 50000 
0 02 12000 


0 46 00012 
0 40 20010 
0 40 20020 
0 40 20400 
0 40 20200 
0 40 20100 
0 40 20040 
43 
5] 
0 40 21000 
0 40 22000 
01 
4) 
0 40 120I1n 
0 46 00004 
OQ 40 14000 


0 46 00400 
0 46 00010 
0 46 00020 
0 40 11000 


0 40 11006 
0 40 10400 
0 46 00001 
0 46 00002 
0 46 00003 
2 46 00000 
0 46 01000 
0 40 14046 
0 40 12006 


Name 


COPY A INTO B, CLEAR A 
ADD WITH CARRY 

ADD MTOA 

ADDA TOM 

ARM INTERRUPTS 

ALERT CHANNEL W 


ALERT TO STORE ADDRESS IN 
CHANNEL W 


COPY BINTO A, CLEAR B 

W BUFFER ERROR TEST 

Y BUFFER ERROR TEST 
BREAKPOINT NO. 1 TEST 
BREAKPOINT NO. 2 TEST 
BREAKPOINT NO. 3 TEST 
BREAKPOINT NO. 4 TEST 
MARK PLACE AND BRANCH 
RETURN BRANCH 

W BUFFER READY TEST 

Y BUFFER READY TEST 
BRANCH UNCONDITIONALLY 
INCREMENT INDEX AND 8RANCH 
BEGINNING OF TAPE TEST. 
COPY A INTO B 


CHANNEL W ACTIVE TEST; SKIP IF 
CHANNEL INACTIVE 


COPY A INTO INDEX 
COPY BINTO A 
COPY B INTO INDEX 


CHANNEL W ERROR TEST; SKIP IF 
NO ERROR 


CARD READER END-OF-FILE TEST 
CHANNEL W INTER-RECORD TEST 
CLEAR A 

CLEAR B 

CLEAR AB 

CLEAR INDEX REGISTER X 

COPY NEGATIVE INTO A 

CARD PUNCH READY TEST 

CARD READER READY TEST 
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wanemen 


CXA 
CXB 
C2120 


DR 

vIV 
BSC'U 
DT2 0,n 
Did 001 
Dip We 
EAX 


EFT n,4 
EIR 
EOD 


EQ 
EOR 
EPT 0, 1 
ERT 0,n, 4 
ETR 
ET I0on 
EXU 
FCT 0, | 
FPTO n 
HLT 
IDT 

IET 
IORD 
1ORP 
IOSD 
IOSP 
GY 
LDA 
LOB 
LDE 
LDX 
LRSH 
USH 
MiN 
MIW 
MIY 
MRG 


Instruction Code 


0 46 00200 
0 46 00040 
0 40 12000 


0 02 20004 
65 

0 02 00000 

0 40 1621n 

0 40 16463n 

0 40 172In 
77 


0 02 0367n 
0 02 20002 
06 


02 
17 
0 40 14060 
0 02 0767n 
14 
0 40 1101n 
“3 
0 40 14006 
0 40 1401n 
00 
0 40 20002 
0 40 20004 


CO 67 20XXX 


76 
75 

0 46 00140 
7\ 


0 68 24XXX 
0 67 OOXXX 


é} 


Name 


COPY INDEX JINTOA 
COPY INDEX INIO B 


CHANNEL W ZERO COUNT TEST; 
SKIP IF COUNT EQUALS ZERO 


DISABLE INTERRUL SYSTEM 
DIVIDE 

DISCONNECT CHANNEL W 
DENSITY TEST, 2U0 BPI 
DENSITY TEST, 556 BPI 
DENSITY TEST, 800 BPI 


COPY EFFECTIVE ADDRESS INTO 
INDEX REGISTER 


ERASE TAPE FORWARD 
ENABLE INTERRUPT SYSTEM 


ENERGIZE OUTPUT TO DIRECT ACCESS 
CHANNEL 


ENERGIZE OUTPUT M 

EXCLUSIVE OR 

END OF PAGE TEST 

ERASE TAPE IN REVERSE 

EXTRACT 

END OF TAPE TEST 

EXECUTE 

FIRST COLUMN TEST 

FileePROTECT 6ST 

HALT 

INTERRUPT DISABLED TEST 
INTERRUPT ENABLED TEST 

1/O OF A RECORD AND DISCONNECT 
1/0 OF A RECORD AND PROCEED 
I/O UNTIL SIGNAL THEN DISCONNECT 
1/O UNTIL SIGNAL THEN PROCEED 
LEFT CYCLE AB 

LOAD A 

LOAD 8B 

LOAD EXPONENT 

LOAD INDEX 

LOGICAL RIGHT SHIFT AB 

LEFT SHIFT AB 

MEMORY INCREMiNT 

M INTO W BUFFER WHEN EMPTY 

M INTO Y BUFFER WHEN EMPTY 
MERGE 


Mnemonic 


MUL 
NOD 
NOP 

OVT 

PBT O, 1 
PCB 0, 1,4 
PCD 0, 1,4 
PFT O, | 
PIN 

PLP 0,1,4 
POL 0, 1 
POT 

PPT O,1,4 
Pree 
PSC 0,1,N 
PSP 0,1,N 
PTE, U4 
RGB O71, 4 
RCD 0, 1,4 
RCY 

REO 

REW 0,n 
RKB O,1,4 
ROV 

RPT 0, 1,4 
RSH 

RTB 0,n, 4 
RTD 0,n,4 
RTS 0 

SFB 0,n,4 
SFD 0,n,4 
SKA 


SKB 


SKD 
SKE 
SKG 
SKM 
SKN 
SKR 


Instruction Code 
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0 67 10XXX 


20 
0 40 20001 
0 20 12046 
0 02 03646 
0 02 02646 
0 40 11060 

33 
0 02 02660 
0 02 10260 

13 
0 02 02644 
0 40 12060 
0 02 IN460 
0 02 IN&60 
0 02 00644 
0 02 03606 
0 02 02606 
0 66 20XXX 
0 02 20010 
0 02 1401n 
0 02 02601 
0 02 20001 
0 02 02604 


0 66 OOXXX 


0 02 036In 

0 02 0261n 

0 02 14000 

0 02 0363n 

0 02 0263n 
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32 


74 
50 
73 
70 
33 
60 
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Nome 


MULTIPLY 
NORMALIZE AND DECREMENT INDEX 
NO OPERATION 

OVERFLOW INDICATOR TEST AND RESET 
PUNCH BUFFER TEST 

PUNCH CARD BINARY 

PUNCH CARD DECIMAL (HOLLERITH) 
PRINTER FAULT TEST 

PARALLEL INPUT 

PRINT LINE PRINTER 

PRINTER OFF LINE 

PARALLEL OUTPUT 

PUNCH PAPER TAPE WITH NO LEADER 
PRINTER READY TEST 

PRINTER SKIP TO CHANNEL N 
PRINTER SPACE N LINES 

PUNCH PAPER TAPE WITH LEADER 
READ CARD BINARY 

READ CARD DECIMAL (HOLLERITH) 
RIGHT CYCLE AB 

RECORD EXPONENT OVERFLOW 
REWIND 

READ KEYBOARD 

RESET OVERFLOW 

READ PAPER TAPE 

RIGHT SHIFT AB 

READ TAPE IN BINARY 

READ TAPE IN DECIMAL (BCD) 
CONVERT READ TO SCAN 

SCAN FORWARD IN BINARY 

SCAN FORWARD IN DECIMAL (BCD) 


SKIP IF MAND A DO NOT COMPARE 
ONES 


SKIP IF MAND B DO NOT COMPARE 
ONES 


DIFFERENCE EXPONENTS AND SKIP 
SKIP IF A EQUALS M 

SKIP IF A GREATER THAN M 

SKIP IF A=M ON B MASK 

SKIP IF M NEGATIVE 

REDUCE M, SKIP IF NEGATIVE 


Mnemonic 


SKS 

SRB O, n, 4 
SRC 0, 1 
SRD 0, n, 4 
SRR O 

STA 

STB 

STE 

STX 

SUB 

SUC 

TFT O 
TGT On 
TOP 0 

TRT 0,n 
TYP 0, 1,4 
WIM 

WTB 0,n,4 
WTD 0, n, 4 
XAB 

XEE 

XMA 

XXA 

XXB 

YIM 


Instruction Code 


40 
0 02 0763n 
0 02 12006 
0 02 0663n 
0 02 13610 
35 
36 
0 46 00122 
37 
54 
56 
0 40 13610 
0 40 1261n 
0 02 14000 
0 40 1041n 
0 02 02641 
32 
0 02 0365n 
0 02 0265n 
0 46 00014 
0 46 00160 
62 
0 46 00600 
0 46 00060 
30 


Nome 





SKIP IF SIGNAL NOT SET 
SCAN REVERSE IN BINARY 
SKIP REMAINDER OF CARD 
SCAN REVERSE IN DECIMAL (BCD) 
SKIP REMAINDER OF RECORD 
STORE A 

STORE B 

STORE EXPONENT 

STORE INDEX 

SUBTRACT 

SUBTRACT WITH CARRY 

TAPE END-OF-FILE TEST 

TAPE GAP TEST, CHANNEL W 
TERMINATE OUTPUT OF CHANNEL W 
TAPE READY TEST 

WRITE TYPEWRITER 

W BUFFER INTO M WHEN FULL 
WRITE TAPE IN BINARY 

WRITE TAPE IN DECIMAL (BCD) 
EXCHANGE A AND B 
EXCHANGE EXPONENTS 
EXCHANGE MAND A 
EXCHANGE INDEX AND A 
EXCHANGE INDEX AND B 

Y BUFFER INTO M WHEN FULL 


69 


APPENDIX IT 


SDS 930 LOGIC TERMINOLOGY 


The SDS 930 computer logic was designed to fulfill two major 
objectives: economy and reliability. Economical design was achieved 
by using a large variety of logic modules, each tailored more or less 
to a particular need. Reliability was achieved by using carefully 
selected components, including all silicon transistors. 

This appendix will describe the characteristics of the SDS 930 


computer logic circuits, logic equations and timing diagrams. 


I. LOGIC CIRCUITRY 
Logic Levels 
Logic Signals are represented in the SDS 930 by DC logic levels 


as follows: 


i] 
=) 
4] 


O volts False 


I 
— 
1] 


+4 volts True 


Most of the SDS 930 series peripheral equipment uses +8 volts for the 
True signal, but the necesSary conversions are made when this equipment 
communicates with the computer. 
Logic Gate Circuitry 

AND gate. The AND gate must have true signals on all inputs in order 
for the output to be true. The standard symbol and the circuit used to 
implement the AND gate are shown in Figure 3. If any one of the diodes 
has a false signal applied to its cathode, that diode will conduct cur- 
rent from the load resistor, R, and cause the output to drop to 0 volts. 
If all diodes have true inputs, the IR drop through R will be 21 volts. 


The output will then be +4 volts, or true. 
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O ww 


= 


"T] ty 


+25 v 


A 
A 
B B R 
ABC 
C 
G 


(a) Symbol (b) Circuit 


Figure 3. AND Gate. 


A 
: 
B = | B 
C ABC 
A C 


(a) Symbol (Dymo Lecagrt 


Figure 4. Expander AND Gate. 


+25 v 


ABCDEF 


A 


(a) Symbol (b) Circuit 


Figure 5. Expanded AND Gate. 
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Expander AND gate. The expander AND gate is identical to the AND 
gate except that it does not have the load resistor. It is used to add 
inputs to a standard AND gate. The symbol and circuit are shown in 
Figure 4. Figure 5 shows the method of expanding an AND gate. A Stand- 
ard AND gate may be expanded to a maximum of 30 inputs. 

OR gate. The OR gate will have a true output if any one or more 
Sof Its inputs are true. This function is illustrated in Figure 6. Eaem 
of the inputs is fed to a single input AND gate, which in turn is con- 
nected to an output diode. If one of the inputs is true, the associated 
output diode will have +4 volts at its anode. Since the forward resis- 
tance of the diode is negligible, the voltage at the bottom of the output 
load resistor is +4 volts, and the output is therefore true. All input 
connections must be connected to desired signal sources or grounded. Tf 
an input is left open, the output will always be true. 

AND/OR gate. When the outputs from two or more AND gates are to be 
combined at an OR gate, this can be done most economically by using an 
extra input diode to each AND gate as the OR gate output diodes. The 
logi@ symbol and circuitry for this configuration are shown in Figure 7. 
Expander AND gates may also be added to the AND portions of the AND/OR 
gate. 

Inverter. An inverter is used to generate the complement or in- 
verse of a signal, and to provide additional driving capability to sig- 
nals.. The imverter symbol and circuit are Shown in Figure 8. The cume@ge 
superimposed on any logic symbol always indicates a complement operation. 
Since the Zener diode is always back-biased by R,, the base of the trans- 
istor will be 3.3 volts below the input. When the input is 0 volts, the 


EGansistor tSeecubsonL, and the Gutpur 1s +4 volts, orf true. When the 
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+25 v 


-25 v 
Aé@ ] 
+25 v 
BC 
At+B+C 
+25 v 
Ce 
(a) Symbol (Bb) Circure 
Figure 6. OR Gate. 
+25 v 
A @ - 
-25 v 
B © ’ 
e r 
AB+CD Y 
+25 v 
-C @ 
D e e 
(a) Symbol Gb.) 2 igcult 


Figure 7. AND/OR Gate. 


> | 





(a) Symbol Cb) “Gereuit 


Figure 8. Inverter. 
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input is true, the transistor is in full conduction, and the output is 
Ratsemcapout 2.25 volt); 

Buffer amplifier. The buffer amplifier is used to increase the fan- 
out capacity of diode logic gates. It consists of two inverters in cas- 
cade. In some cases the Zener diode and bias resistor of the second 
inverter are omitted... The circuit symbol and both circuit configurations 
are shown in Figure 9. The operation of each inverter is the same as 
described in the previous paragraph. 

Buffered AND gate. The buffered AND gate, or BAND, performs the 
same logic function as the AND gate, except that it provides for in- 
creased fan-out capability. It is a series combination of an AND gate 
and a buffer amplifier. The logic symbol is shown in Figure 10. 

Negative AND gate. The negative AND gate, or NAND, produces the 
complement of the standard AND gate as an output, since it iS a series 
combination of the AND gate and the inverter. The output also has in- 
creased fan-out capability. The NAND is the standard logic circuit used 
in the SDS 930. If there is a choice between a NAND and some other cir- 
cuit which will do the same job, the NAND is chosen. The NAND symbol is 
illustrated in Figure ll. 

Line inverter. A line inverter is used on each end of a coaxial 
transmission line when used for transmitting signals. It is similar to 
the standard inverter, except that it performs the additional tasks of 
impedance matching, and logic level modification where required. The 
inverter at the sending end is called a line driver, and the one at the 
receiving end is called a line receiver. The symbols for these are shown 


in Figure 12. 
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+16 Vv +4 Vv 


Ca) Symbol (b) First Configuration 


+hoy 





-25 v 
_ (ec) Second Configuration 


Figure 9. Buffer Amplifier 
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B =— ae ae ow we 
ABC ABC ABC 
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(b) Equivalent Circuit 


mo 


ow?) 


(a) Symbol 
Figure 10. Buffered AND. 
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ABC C ABC 
e C 


(a) Symbol (b) Equivalent Circuit 
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Figure 11. Negative AND. 
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Pit pet leap Operation 


The flip-flop is the primary logic signal storage device in the 
SDS 9302 Many configurations are used, but . logical operation of 
three basic types will be described here. 

The standard flip-flop used in the SDS 930 is the AC flip-flop. 

This circuit is a standard transistorized bistable multivibrator, with 

the added feature that its operation is controlled by timing pulses. If 

a signal is present at the set input and the flip-flop is in the reset 
State, or vice versa, it will switch to the opposite state in coincidence 
with the trailing edge of the next timing pulse. This provision makes 

it possible for a flip-flop to have separate, independent, input and out- 
put signals at the same time with no possibility of confusion between the 
two. This flipaélap* usualis.containg.asDC input to either the set orm@ue. 
set states. Grounding of this DC input will cause the flip-flop to switch 
to the indicated state immediately without regard to timing pulses. 

The NAND flip-flop is similar to the one previously described, with 
the exception that the set and reset inputs are fed through NAND gates. 
The circuit symbol of the AC and NAND Big eo cs Aes shown in Figure 13. 

The DC flip-flop is a standard bistable multivibrator without AC 
clocking. The set input is normally a series of three AND gates, with 
two inputs each, combined in an OR gate. DC flip-flops are used as the 
stages of the memory register to provide the shortest possible memory 


-eyele time. Its circuit symbol is the same as that of the AC flip-flop. [12] 


II. LOGIC DOCUMENTATION 


The construction and operation of the computer are fully described 
by (1) the logic equations, (2) the logic diagrams, (3) the timing 
diagrams, and (4) the module reference data. Each will be described briefly, 


followed by an example function illustrating the use of these documents. 


ES 





(a) Line Driver (b) Line Receiver 


Figure 12. Line Inverters. 





(a) AC Flip-flop (b) NAND Flip-flop 


Figure 13. Flip-flops 
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Logic Equation 

Logic equations are used to define the origin of each signal gen- 
erated within the computer. The left-hand side of the equation is a 
single term which names the signal generated by the combination of terms 
on the right-hand side. Some signals involving registers have names 
which are descriptive of the function of the signal. These are illus- 


trated in Table 4 using a fictitious D register. 


Term Meaning 

sD12 Sets flip-flop D12, the 12th stage of the D register 
rD12 Resets flip-flop D12 

De Clears (resets) the D register 

Dk Complements the D register 

Dxe Enables the transfer of the contents of the E 


register to the D register 
Dr3 Shifts the D register pexght 3 bits 


D&2 Shifts the D register left two bits 


Table 4. Special Logic Equation Terms 


The right-hand side of a logic equation represents the logical com- 
bination of signals which produces the generated signal. The AND function 
is represented by the multiplication of terms, the OR function is repre- 
sented by the addition of terms, and the NOT function is represented by 
a bar over the applicable terms. 

Logic Diagram 

The CPU consists of circuits mounted on logic modules. There are 
five rows of 64 modules each. The rows are lettered B, C, D, E, and F. 

A logic element numbered 32C is on the 32nd module of the C, or second, 


TOWe 


TS 


The logic diagrams show the circuitry, in logic symbol form, which 
is used to implement each logic equation. These diagrams also show the 
location of each circuit in the computer for maintenance purposes. A 
portion of a typical logic diagram is shown in Figure 14. This circuit 
consists of one NAND gate into the set and one into the reset sides of 
the NAND flip-flop Mgz. 

The numbers adjacent to the small circles in Figure 14 indicate pin 
numbers on the logic modules. The set output of Mgz has a separate load 
resistor, which is mounted on logic module 44E and connected to pin num- 
ber 40 of that module. The flip-flop is located on module number 40C, 
and the NAND gates on 54C. 

The logic equations for Mgz are 


2rq T3 aT 


sMgz 
rMgz = T4 . 
The correlation between the equations and the circuit 1s readily apparent. 
Timing Diagram 
The timing diagrams indicate the sequence of operations initiated 
by each computer instruction. A sample timing diagram is shown in Figure 
15. The space between two horizontal lines represents one timing pulse. 
Each signal initiated by a timing pulse is shown to the right of a ver- 
tical line in the space for that pulse. The timing pulse for each space 
and the particular phase in which it occurs are labeled at the left-hand 
edge of the diagram. If the signal is present for more than one timing 
pulse, this is indicated by a vertical line through all of the applicable 
timing pulse spaces. 
For example, in Figure 15, the signal sEax is true during timing 
pulse T8 of phase zero only. The signals C—Add, Cr3, and Add-—>C 


are all true during timing pulses T/ through TO of phase zero. 
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$6 





HUE 


Figure 14. Typical Logic Diagram 


iS eae AE PS: 
aa ia 
ee 2 ee | 
ee 
a ree 
3 | _|reax | [Add——x]] == Sxe, sags 
aa ee 
cme Add] 
o loa [Add——c fl x—=Ade 
Ir — i 
oD deesF2. SS ——CCCsidd 
7 
5 
I [) Sc, rMa: 
3. Pr3 | Sxp.sMax 
oe ee eee eee eee 
] : 
0 


Figure 15. Timing Diagram, EAX Instruction 
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The double vertical line indicates a conditional action. In Figure 
15, if Ix is set at T8, then X-—»Add is true from T6 through TO. If Ix 
is not set, then X-™Add will remain false. 
Module Reference Data 

The module reference data publication contains a complete circuit 
diagram for each different type of logic module used in the SDS 930 
computer. [a 3] 
Example 

The use of the Ju flip-flop in a Branch Unconditional instruction, 
BRU, will be traced to illustrate the method of using the previously 
described documents. The BRU causes the next instruction to be taken 
from the memory location indicated by the operand address. 

The timing diagram for the BRU is shown in Figure 16. It shows that 
the Ju flip-flop is set at T8 of @O. This is verified by the logic equa- 


tion for setting Jus 


sJu = (G0 T8 Ta Go) G2 


+ (90 T8 Ia Go) c4 C5 c8 C9 


——_ es SS 


+ (@0 T8 C9) 02 03. 


The second term of the equation is applicable in this case. It indicates 
that if indirect addressing is not being used (Ia and C9), AND the com- 
puter is operating (Go), AND the proper opcode is present (ch Ga ¢s), 
then Ju is set at T8 of QO. 

The implementation of the sJu logic equation into circuitry is shown 
in Figure 17. The output of the NAND gate at pin 28 of module 47B is 
(GO T8 Ta Go) C2. The direct combination of this NAND gate and the other 
two NAND gates with load resistor at pin 51 of module C9 constitutes an 


AND function. The input to the NAND gate at pin 6 of module 46B is 


Sil 


amd 
ms °] 


c, rMgs 
Sxp, sMgs 


wa 
q 


$0 


> 
Q 
a 
1 


C —=Add 


Of— MT wolem [aro [~[co 


X —=Add 


_ 
be | 
oO 
= 
Gd 
- 


a" 
2) 
x 
3 


rJu, Oc 


Figure 16, Timing Diagram, BRU Instruction. 
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Figure 17. Ju Flip-flop Logic Circuit. 
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therefore: 


(0 T8 Ta Go G2) (G0 T8 Ta Go C4 C5 C8 C9) (G0 T8 C9 02 03) 


@ 


By DeMorgan's theorem, this is equivalent to: 
(GO T8 La Go C2) + (G0 T8 Ta Go C4 C5 C8 C9) + (GO TS C9 02 03). 


The output of the NAND gate, which is the inverse of the above function, 
is the necesSary Signal to set flip-flop Ju and is the input to pin 37 
of module 33B. 

The actual circuit used can be determined as follows. The Ju flip- 
flop is located on the module at location 33B. The diagram on page 5 
of the logic diagram publication shows that this location contains an 
FB52 logic module. The complete circuit diagram for this module is 


shown in the module reference data publication. 
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APPENDIX IIT 


SUMMARY OF PROPOSED LOGIC MODIFICATIONS 


sAi = {[ir cin + En) ) + Is] GO TO TInt Mo 
[ra eOINGD O2eo (Ole? 02) = 01 02 07 04 O5 os} 
rAi.. = 963 
Cr3 = Tsr Ql 
+ Fl F2 Ts Ql 
+ Fl F3 Ts Ql 
en roel 
+ Ex Ts Ql 
+ St 
+ Ge + Ts OW 
+ Go Ix Rf 
+ 05 Ob 06 Ts Q1 
sEax = (QO T8 Ta Go C2 + JO T8 Ia Go C3 C4 C5 C6 C7 C8 C9 
+ GO T8 C9 02 03) Ob Pi Ai Piq 
sFl = Ob Tp (Eax + Sk + @4) 
+ Ob GO Tp Ta (03 04 + O01 O04) 
+ Ob Tp Fl F3 01 03 O04 Ta RE 
+ GO T8 Ta C2 C5 C8 (C3 + CH) 
+ T8 (Ob + Al) 
+ Pigq 
+ T8 Go 
ili = Ihc) Gayaval Sk + Ob) 
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SF2 


SEs 


sila 


rla 


Ob Tp 


+ Ob @O0 


+ Ob QO 


+ GO Ta 


+ T8(Ob 


+ Pig 


Mo Qt4 


gQ T8 


+ OATS C2 G5 comes + 


+ T8 Q@7 


+ T8 Fl 


(Eax + Sk + G4) 


em 


Tip lied 
TD Pasion (01 4p 


mm ee eee 


Tp Ia 03 0 


w 


02 


Tp Ta 04 05 06 


(Eax + Sk + G4) 


Ta C2 C5 CSG = eo) 


Tp Ta 03 04 
04 03 O4 05 


+ Ai) 


C2 C9 [ go Ta T8 C2 C5 C8 (C3 + Ch) 
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> 
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(S) 
on 
rg 
-_ 

XO 


sk (Kr) (Tj + Inr) 


F3 (kr) (Ij + Inr) 
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(plo Prosopis O02 FI 
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ec) hel 
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sint 


sJu 


SMo 


rMo 


Mxc 


s06 


r06 


sOb 


rOb 


Oc 


Ope 


SPO 


rPO 


(5 01 05 Ts Ol) TH End Is + Ir(En + En ) Ts Ob PL 


(GO T8 Ta Go G2 + GO T8 Ta Go C4 C5 c8 CO 


+ ZO T8 C9 O02 


3) Ob Pi Ai Pig 


Eom G1lO Cll Cl8 TO 


+ Usi Ib 


T3 (Pi + Ob) 


+ Tr Mo Int 


Ob [Tem (G4 + Eax + Ju O01 05) + Tsm R9 + Ge) | 


Oxe CUS + 0c Ob Ju OFS 


Oc Ob 


Pme Mo End T2 Int 


+ Pme Mo @O T2 


(Ju O01 05 Xwi)| 
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Pr3 saa (Ju 
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+ PIO (ele Ta) FL (Coe (kme) ) OF OF 5 065 } 
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Pr3 { saaa (Ju Eax + 02 04 O5 06 + Ob O06) 
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ae = <<a; 
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